Skip to content
Leak site of pear, captured by ThreatCluster

pear

Active

25 tracked victims · First seen Aug 18, 2023 · Last seen Oct 14, 2026

About

Written by ThreatCluster from 6 stories

pear is a ransomware group that operates a data-extortion approach, exfiltrating large data sets and threatening public release on the dark web to coerce payment. Victims claimed total 108, spanning Healthcare, Business Services, Manufacturing, Financial Services, and Technology sectors, with the United States, Jamaica, Canada, Switzerland, and Egypt as the most affected countries. A pattern in the recent reporting is large-scale data theft followed by public exposure, illustrated by the August 2026 attack on Arkansas Oral & Maxillofacial Surgeons in which 2.1 terabytes of data were posted on the dark web.

Sectors: Healthcare, Business Services, Manufacturing · Countries: US, JM, CA

Recent victims

View all →
VictimSectorCountryDataPostedStatus
Adobe Insurance Brokers, LLC
adobebrokers.com
InsuranceUSA304 GbOct 21, 2026listed
Macfarlan Capital Partners
macfarlan.com
Finance, Real EstateUSA350 GbOct 16, 2026published
Solar Communications International
rftransparent.com
ManufacturingUSA1.4 TbOct 16, 2026published
Caretaker Landscape and Tree Management
caretakerlandscape.com
Consumer ServicesUSA544 GbOct 16, 2026published
Software Answers, a Banyan Software Company
softwareanswers.com
Enterprise Resource Planning (ERP)USA11.3 TbSep 30, 2026published
Kellys Home Center
kellyshomecenter.com
Furniture, Retail, Department Stores, Shopping Centers & SuperstoresUSA670 GbSep 28, 2026published
Westside GI
westsidegicenter.com
Hospitals & Physicians ClinicsUSA216 GbSep 24, 2026published
Martin Lawrence Galleries
martinlawrence.com
Auctions & Art GalleriesUSA460 GbSep 24, 2026published
Indroj Medical Group Inc.
npiprofile.com
Medical PracticesUSA416 GbSep 24, 2026published
Foss Inc.
fossinc.com
Civil Engineering ConstructionUSA800 GbSep 9, 2026published
EdgeChem Jamaica Limited
edgechem.com
Paint, Coating, and Adhesive Manufacturing, Chemicals, Petrochemicals, Glass & Gases, ManufacturingJamaica3.7 TbSep 5, 2026published
Kovo Healthtech Corp
kovoplus.com
Healthcare SoftwareUSA2.7 TbSep 5, 2026published
NEXT LEVEL MEDICAL, LLC
nextlevelurgentcare.com
Hospitals & Physicians ClinicsUSA3 TbAug 26, 2026listed
Island Networks
islandnetjm.com
Internet Service Providers, Website Hosting & Internet-related ServicesJamaica7.3 TbAug 22, 2026published
Mogren, Glessner & Ahrens, P.S.
mgrlaw.com
Law Firms & Legal ServicesUSA380 GbAug 22, 2026published
Clifton Architectural Glass & Metal
cliftonglass.com
Construction ManagementUSA2.6 TbAug 21, 2026published
First Commerce LLC
firstcommercellc.com
Advertising Networks, Finance & Real Estate Business ServicesUSA1 TbAug 21, 2026published
Medical Arts Chemists and Surgicals
medarts.net
Medical Equipment and Surgical SuppliesUSA490 GbAug 20, 2026published
Club One Casino
clubonecasino.com
Gambling & GamingUSA620 GbAug 20, 2026published
Practi-Cal
practi-cal.com
inancial & Healthcare SoftwareUSA11 TbAug 20, 2026published
Austin Plastic Surgery Institute
austinpsi.com
Hospitals & Physicians ClinicsUSA2.7 TbAug 20, 2026published
Sonitor Technologies
sonitor.com
Healthcare SoftwareUSA560 GbJul 30, 2026published
Metropolitan Construction Systems
metropolitanroof.com
Construction ManagementUSA1.6 TbJul 24, 2026published
Carient Heart & Vascular
carient.com
Hospitals & Physicians ClinicsUSA3.4 TbJul 15, 2026published
South Plains Rural Health Services, Inc.
sprhs.org
Hospitals & Physicians ClinicsUSA1.4 TbJul 15, 2026published

Found by ThreatCluster

42 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

Indroj Medical Group Inc
npiprofile.com · Medical Practices · 416 Gb
Sep 30, 2026

All ransomware groups · Dark web intelligence